F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks
Source Bleeping Computer
Mentioned vulnerabilities
Rated Critical by Threat Radar from the Bleeping Computer text
Data as of 24 Sep 2026, 08:52 UTC
What to do
AI-suggested
F5 has released official security updates that fix this vulnerability and should be applied immediately. For environments unable to patch promptly, F5 provides an iRule mitigation available from F5 Support to apply to the affected BIG-IP APM virtual servers. Customers are advised to monitor for indicators of compromise such as multiple OAuth authentication failures and suspicious commands followed by TMM SIGABRT events. Follow F5's official advisory for detailed remediation steps and apply patches as soon as possible.
Description
F5 has released security updates to address a critical BIG-IP APM zero-day vulnerability being exploited in remote code execution attacks. [...]